loop until passwords match
check if user exist before adding